Clubbing Seals: Exploring the Ecosystem of Third-party Security Seals. - Tom van Goethem; Frank Piessens; Wouter Joosen; Nick Nikiforakis (CCS, 2014)

Large-Scale Security Analysis of the Web: Challenges and Findings. - Tom van Goethem; Ping Chen; Nick Nikiforakis; Lieven Desmet; Wouter Joosen (TRUST, 2014)

The Clock is Still Ticking: Timing Attacks in the Modern Web. - Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2015)

Maneuvering Around Clouds: Bypassing Cloud-based Security Providers. - Thomas Vissers; Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2015)

Accelerometer-Based Device Fingerprinting for Multi-factor Mobile Authentication. - Tom van Goethem; Wout Scheepers; Davy Preuveneers; Wouter Joosen (ESSoS, 2016)

It's Free for a Reason: Exploring the Ecosystem of Free Live Streaming Services. - M. Zubair Rafique; Tom van Goethem; Wouter Joosen; Christophe Huygens; Nick Nikiforakis (NDSS, 2016)

Request and Conquer: Exposing Cross-Origin Resource Size. - Tom van Goethem; Mathy Vanhoef; Frank Piessens; Wouter Joosen (USENIX Security Symposium, 2016)

Herding Vulnerable Cats: A Statistical Approach to Disentangle Joint Responsibility for Web Security in Shared Hosting. - Samaneh Tajalizadehkhoob; Tom van Goethem; Maciej Korczynski; Arman Noroozian; Rainer Böhme; Tyler Moore 001; Wouter Joosen; Michel van Eeten (CCS, 2017)

The Wolf of Name Street: Hijacking Domains Through Their Nameservers. - Thomas Vissers; Timothy Barron; Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2017)

One Side-Channel to Bring Them All and in the Darkness Bind Them: Associating Isolated Browsing Sessions. - Tom van Goethem; Wouter Joosen (WOOT, 2017)

Automated Feature Extraction for Website Fingerprinting through Deep Learning. - Vera Rimmer; Davy Preuveneers; Marc Juarez; Tom van Goethem; Wouter Joosen (CoRR, 2017)

Idea: Visual Analytics for Web Security. - Victor Le Pochat; Tom van Goethem; Wouter Joosen (ESSoS, 2018)

Automated Website Fingerprinting through Deep Learning. - Vera Rimmer; Davy Preuveneers; Marc Juarez; Tom van Goethem; Wouter Joosen (NDSS, 2018)

Who Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie Policies. - Gertjan Franken; Tom van Goethem; Wouter Joosen (USENIX Security Symposium, 2018)

Rigging Research Results by Manipulating Top Websites Rankings. - Victor Le Pochat; Tom van Goethem; Wouter Joosen (CoRR, 2018)

Purchased Fame: Exploring the Ecosystem of Private Blog Networks. - Tom van Goethem; Najmeh Miramirkhani; Wouter Joosen; Nick Nikiforakis (AsiaCCS, 2019)

Mobile Friendly or Attacker Friendly?: A Large-scale Security Evaluation of Mobile-first Websites. - Tom van Goethem; Victor Le Pochat; Wouter Joosen (AsiaCCS, 2019)

Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation. - Victor Le Pochat; Tom van Goethem; Samaneh Tajalizadehkhoob; Maciej Korczynski; Wouter Joosen (NDSS, 2019)

Funny Accents: Exploring Genuine Interest in Internationalized Domain Names. - Victor Le Pochat; Tom van Goethem; Wouter Joosen (PAM, 2019)

A Smörgåsbord of Typos: Exploring International Keyboard Layout Typosquatting. - Victor Le Pochat; Tom van Goethem; Wouter Joosen (IEEE Symposium on Security and Privacy Workshops, 2019)

Evaluating the Long-term Effects of Parameters on the Characteristics of the Tranco Top Sites Ranking. - Victor Le Pochat; Tom van Goethem; Wouter Joosen (CSET @ USENIX Security Symposium, 2019)

Exposing Cookie Policy Flaws Through an Extensive Evaluation of Browsers and Their Extensions. - Gertjan Franken; Tom van Goethem; Wouter Joosen (IEEE Secur. Priv., 2019)

A Practical Approach for Taking Down Avalanche Botnets Under Real-World Constraints. - Victor Le Pochat; Tim Van hamme; Sourena Maroofi; Tom van Goethem; Davy Preuveneers; Andrzej Duda; Wouter Joosen; Maciej Korczynski (NDSS, 2020)

Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote Connections. - Tom van Goethem; Christina Pöpper; Wouter Joosen; Mathy Vanhoef (USENIX Security Symposium, 2020)

Reading Between the Lines: An Extensive Evaluation of the Security and Privacy Implications of EPUB Reading Systems. - Gertjan Franken; Tom van Goethem; Wouter Joosen (SP, 2021)

The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion. - Yana Dimova; Gunes Acar; Lukasz Olejnik; Wouter Joosen; Tom van Goethem (Proc. Priv. Enhancing Technol., 2021)

SoK: Exploring Current and Future Research Directions on XS-Leaks through an Extended Formal Model. - Tom van Goethem; Gertjan Franken; Iskander Sánchez-Rola; David Dworken; Wouter Joosen (AsiaCCS, 2022)

Towards Improving the Deprecation Process of Web Features through Progressive Web Security. - Tom van Goethem; Wouter Joosen (SP (Workshops), 2022)

Helping hands: Measuring the impact of a large threat intelligence sharing community. - Xander Bouwman; Victor Le Pochat; Pawel Foremski; Tom van Goethem; Carlos Hernandez Gañán; Giovane C. M. Moura; Samaneh Tajalizadehkhoob; Wouter Joosen; Michel van Eeten (USENIX Security Symposium, 2022)

An Audit of Facebook's Political Ad Policy Enforcement. - Victor Le Pochat; Laura Edelson; Tom van Goethem; Wouter Joosen; Damon McCoy; Tobias Lauinger (USENIX Security Symposium, 2022)

Trace Oddity: Methodologies for Data-Driven Traffic Analysis on Tor. - Vera Rimmer; Theodor Schnitzler; Tom van Goethem; Abel Rodríguez Romero; Wouter Joosen; Katharina Kohls (Proc. Priv. Enhancing Technol., 2022)

Time Will Tell: Exploiting Timing Leaks Using HTTP Response Headers. - Vik Vanderlinden; Tom van Goethem; Mathy Vanhoef (ESORICS (2), 2023)

Scripted Henchmen: Leveraging XS-Leaks for Cross-Site Vulnerability Detection. - Tom van Goethem; Iskander Sánchez-Rola; Wouter Joosen (SP (Workshops), 2023)

A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs. - Gertjan Franken; Tom van Goethem; Lieven Desmet; Wouter Joosen (USENIX Security Symposium, 2023)

Everybody's Looking for SSOmething: A large-scale evaluation on the privacy of OAuth authentication on the web. - Yana Dimova; Tom van Goethem; Wouter Joosen (Proc. Priv. Enhancing Technol., 2023)

Evaluating the Impact of Design Decisions on Passive DNS-Based Domain Rankings. - Victor Le Pochat; Simon Fernandez; Tom van Goethem; Samaneh Tajalizadehkhoob; Lieven Desmet; Andrzej Duda; Wouter Joosen; Maciej Korczynski (TMA, 2024)

Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web Browsers. - Gertjan Franken; Pieter Claeys; Tom van Goethem; Lieven Desmet (SOUPS, 2025)